Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
File: 01Cgds5KjOb7afH9pKGUYUqUGvo.mft (raw, json)
Hash identifier: gGXJLTHMFv+kVmZfVrxeT2Y6qwMtH7dmEK1fjMGV3As=
Subject key identifier: 66:CE:E3:B7:B5:81:CF:38:90:6D:A7:C3:19:17:5C:8B:5F:93:81:77
Authority key identifier: D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA
Certificate issuer: /CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
Certificate serial: 019D38D35F3806B77747E44B178ABB38D05A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:01:09 +0000
Manifest this update: Sun 29 Mar 2026 09:01:09 +0000
Manifest next update: Mon 30 Mar 2026 09:01:09 +0000
Files and hashes: 1: 01Cgds5KjOb7afH9pKGUYUqUGvo.crl (hash: 2VkhKhtMaWlsYlOYzvHz5Niu//GowVSyRHyDnMRufTA=)
2: EkysD1nuSYyDinbnDahfH-VyT0k.roa (hash: I2/OA/U368nOnLRCtdWjPsJgwSqvtccdxmLHw2kJW9Y=)
3: RbJbPNiBU0kAmqUheDo0szIBjek.roa (hash: CTVJkxKyBFMb7b5JJrpF23blu0aI0z8ZUdPB6VOt7qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:5f:38:06:b7:77:47:e4:4b:17:8a:bb:38:d0:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
Validity
Not Before: Mar 29 09:01:09 2026 GMT
Not After : Mar 30 09:01:09 2026 GMT
Subject: CN=66cee3b7b581cf38906da7c319175c8b5f938177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:27:18:0f:92:5a:97:d7:b0:47:b7:1e:b9:23:
56:5c:92:66:ad:21:cf:73:5f:47:e9:25:d6:ab:b5:
f5:44:18:7b:3f:2f:29:1f:74:a1:bb:90:f5:fe:2f:
1a:cf:81:c3:bd:17:d9:cb:bd:73:44:30:b7:67:64:
ce:1c:bb:2d:aa:7c:9f:22:e9:86:38:3d:32:98:16:
aa:f4:36:7f:12:e7:14:00:34:d5:a2:dc:b2:82:81:
b5:f9:ca:1d:12:b3:33:f5:5a:00:06:a5:e0:7b:3e:
e8:1b:ef:5e:69:4c:65:81:8a:38:f0:b2:97:24:c8:
47:0f:fe:61:7e:aa:df:e8:b6:31:a2:8f:dd:dd:f3:
4a:d2:0b:76:89:a4:6e:59:35:27:f7:bd:be:80:92:
8e:97:98:22:b2:b8:2a:0e:01:c9:a8:fd:f0:ea:72:
7a:70:ae:24:22:a1:75:75:fa:a7:95:f8:7c:98:de:
30:a2:c3:86:8b:48:e1:bf:f5:55:00:25:7c:33:90:
db:c4:eb:f7:8d:79:c0:34:26:4f:2b:38:ae:79:b7:
2f:2d:c5:ed:cc:31:9c:35:6e:de:1b:70:d8:8b:e6:
ab:94:d5:0e:4c:b4:0b:f3:d7:54:7e:a8:6a:d1:d6:
5d:0e:73:b7:df:75:e0:a6:2e:46:c6:e2:ab:5f:dd:
34:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CE:E3:B7:B5:81:CF:38:90:6D:A7:C3:19:17:5C:8B:5F:93:81:77
X509v3 Authority Key Identifier:
keyid:D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d6:20:72:b5:53:84:19:a4:dc:e1:90:7d:25:22:bb:d4:fc:
f4:6e:cc:55:80:05:be:09:b5:a2:b7:23:30:bb:4d:bb:cf:48:
10:b1:f1:f4:ee:f2:4e:5e:80:b0:16:5e:21:83:59:6a:72:e3:
44:f7:0f:38:74:b8:df:96:03:04:2c:27:9b:ce:47:6c:6e:a8:
96:ff:a7:1b:a9:29:e9:10:52:a4:2e:ac:13:b9:6c:7f:6c:2d:
b2:e8:2b:a0:ac:18:cb:70:2d:59:50:45:d6:d8:c8:10:d7:cb:
43:16:cc:14:4b:76:e9:f3:79:68:4b:a4:9d:62:cd:eb:73:a4:
82:4c:13:fc:f1:39:4c:af:16:ec:8c:17:9a:26:44:2e:59:52:
3b:bb:be:fb:e1:a6:02:4e:86:bb:be:74:45:69:0e:e5:b7:58:
5b:c8:ba:75:b6:8e:27:10:00:f5:fa:a7:ac:c9:69:a3:3d:6a:
0e:ef:03:29:20:97:dc:69:56:4f:8b:1b:3c:b9:5b:cd:1d:a1:
c1:16:90:d6:79:b4:dd:22:95:e0:bc:ef:70:94:c6:81:cf:41:
69:e0:00:1c:cd:ad:0d:7f:c4:9e:fe:19:6c:12:d2:bb:76:5b:
31:1c:01:a5:3c:61:d0:ad:2c:f4:9d:cf:f1:e0:0f:bc:4c:e6:
32:1f:e2:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040184Brd3R+RLF4q7ONBaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNTBhMDc2Y2U0YThjZTZmYjY5ZjFmZGE0YTE5NDYxNGE5
NDFhZmEwHhcNMjYwMzI5MDkwMTA5WhcNMjYwMzMwMDkwMTA5WjAzMTEwLwYDVQQD
Eyg2NmNlZTNiN2I1ODFjZjM4OTA2ZGE3YzMxOTE3NWM4YjVmOTM4MTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ScYD5Jal9ewR7ceuSNWXJJmrSHP
c19H6SXWq7X1RBh7Py8pH3Shu5D1/i8az4HDvRfZy71zRDC3Z2TOHLstqnyfIumG
OD0ymBaq9DZ/EucUADTVotyygoG1+codErMz9VoABqXgez7oG+9eaUxlgYo48LKX
JMhHD/5hfqrf6LYxoo/d3fNK0gt2iaRuWTUn972+gJKOl5gisrgqDgHJqP3w6nJ6
cK4kIqF1dfqnlfh8mN4wosOGi0jhv/VVACV8M5DbxOv3jXnANCZPKziuebcvLcXt
zDGcNW7eG3DYi+arlNUOTLQL89dUfqhq0dZdDnO333Xgpi5GxuKrX900cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbO47e1gc84kG2nwxkXXItfk4F3MB8GA1UdIwQY
MBaAFNNQoHbOSozm+2nx/aShlGFKlBr6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDFDZ2RzNUtqT2I3YWZIOXBLR1VZVXFVR3ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8zY2FjNmItMmMyYS00YjY2LWFkZWUt
ZDUyMzI1ZGU2YjA4LzEvMDFDZ2RzNUtqT2I3YWZIOXBLR1VZVXFVR3ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8zY2FjNmItMmMyYS00YjY2LWFkZWUtZDUyMzI1ZGU2YjA4
LzEvMDFDZ2RzNUtqT2I3YWZIOXBLR1VZVXFVR3ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi9YgcrVT
hBmk3OGQfSUiu9T89G7MVYAFvgm1orcjMLtNu89IELHx9O7yTl6AsBZeIYNZanLj
RPcPOHS435YDBCwnm85HbG6olv+nG6kp6RBSpC6sE7lsf2wtsugroKwYy3AtWVBF
1tjIENfLQxbMFEt26fN5aEuknWLN63OkgkwT/PE5TK8W7IwXmiZELllSO7u+++Gm
Ak6Gu750RWkO5bdYW8i6dbaOJxAA9fqnrMlpoz1qDu8DKSCX3GlWT4sbPLlbzR2h
wRaQ1nm03SKV4LzvcJTGgc9BaeAAHM2tDX/Env4ZbBLSu3ZbMRwBpTxh0K0s9J3P
8eAPvEzmMh/iOg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:53:48 2026 by rpki-client